OpenSSL 'ssl3 _ release_read_buffer () 're-exploits the memory corruption vulnerability after being released

Release date:
Updated on:

Affected Systems:
OpenSSL Project OpenSSL
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66801
 
OpenSSL is an open-source SSL implementation that implements high-strength encryption for network communication. It is widely used in various network applications.
 
The ssl3_release_read_buffer () function of OpenSSL has the post-release Reuse Vulnerability. Attackers can exploit this vulnerability to destroy the memory and execute arbitrary code in the context of the application that uses the affected database.
 
<* Source: Benson Kwok
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
OpenSSL Project
---------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.openssl.org/

OpenSSL details: click here
OpenSSL: click here

OpenSSL TLS heartbeat read remote information leakage (CVE-2014-0160)

Severe OpenSSL bug allows attackers to read 64 KB of memory, fixed in half an hour in Debian

OpenSSL "heartbleed" Security Vulnerability

Provides FTP + SSL/TLS authentication through OpenSSL and implements secure data transmission.